Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Low)
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 8.8 · googleNVD modified 2026-10-25 17:10
Affected (CPE criteria) 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
References 2
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html Release Notes
- https://issues.chromium.org/issues/513138148 Permissions Required